https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:43:54 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-06306 bdu:2021-06306 https://cve.radiocsirt.org/vuln/bdu:2021-06306 https://cve.radiocsirt.org/vuln/euvd-2026-21009 EUVD-2026-21009 https://cve.radiocsirt.org/vuln/euvd-2026-21009 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3713 <p>An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice-&gt;data3 and UASDevice-&gt;status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.</p> <p>An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice-&gt;data3 and UASDevice-&gt;status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3713 https://cve.radiocsirt.org/vuln/ghsa-q4w6-2g7p-pr2c <p>An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice-&gt;data3 and UASDevice-&gt;status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.</p> <p>An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice-&gt;data3 and UASDevice-&gt;status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.</p> https://cve.radiocsirt.org/vuln/ghsa-q4w6-2g7p-pr2c https://cve.radiocsirt.org/vuln/gsd-2021-3713 gsd-2021-3713 https://cve.radiocsirt.org/vuln/gsd-2021-3713 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3713 msrc_CVE-2021-3713 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3713 https://cve.radiocsirt.org/vuln/oesa-2021-1348 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: qemu, openEuler:20.03-LTS-SP2: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es): An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice-&amp;gt;data3 and UASDevice-&amp;gt;status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.(CVE-2021-3713)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: qemu, openEuler:20.03-LTS-SP2: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es): An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice-&amp;gt;data3 and UASDevice-&amp;gt;status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.(CVE-2021-3713)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1348 https://cve.radiocsirt.org/vuln/opensuse-su-2021:3604-1 <p>Security update for qemu</p> <p>Security update for qemu</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:3604-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3713 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: qemu</p> <p>An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice-&gt;data3 and UASDevice-&gt;status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: qemu</p> <p>An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice-&gt;data3 and UASDevice-&gt;status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3713 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1119 <p>Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1119